$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft File: bX2AV2xLO-av9DH40yM49x_fAd0.mft (raw, json) Hash identifier: 4/ot6uj3u4H/sB1ZwSccq+5GUpvdqrCJXhun5SoaHGk= Subject key identifier: 5E:3F:48:0F:89:EA:98:AB:BE:A9:73:7E:FF:0D:85:24:3F:64:6A:FB Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Certificate serial: 0E94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft Manifest number: 0E8D Signing time: Fri 30 May 2025 17:52:22 +0000 Manifest this update: Fri 30 May 2025 17:52:22 +0000 Manifest next update: Fri 06 Jun 2025 17:52:22 +0000 Files and hashes: 1: bX2AV2xLO-av9DH40yM49x_fAd0.crl (hash: C2MY0/qmdttvjqsKoBZN4zTJISMlSHgFRFpYTwPWoDs=) 2: 4E150C0890FD11E98DB54881C4F9AE02.roa (hash: WbUUTzfSyCpyqPb3jZBov7io1LDDEMhW0G0g1zGhi5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3732 (0xe94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Validity Not Before: May 30 17:52:22 2025 GMT Not After : Jun 6 17:52:22 2025 GMT Subject: CN=6839f056-5798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:03:4c:7e:fe:42:6c:e4:b9:3e:dd:3c:3f: a8:e9:a0:65:bc:0c:f9:f4:1a:21:bb:09:34:69:ec: 4d:85:ce:c6:2b:cf:19:6c:a2:77:3f:74:fe:32:6c: db:8f:2d:05:f1:89:02:55:58:24:c7:d2:f4:49:3a: 8d:de:f1:f4:a9:e5:cf:7b:28:fb:14:16:17:d3:8f: 4e:48:b0:26:bc:b8:d2:7e:0c:31:39:d8:80:dd:44: d8:a3:8e:e0:6f:96:70:1c:33:89:c1:6a:61:e9:b6: 8f:d8:dd:47:86:89:26:25:3a:31:d5:ac:bb:b7:b6: e5:c6:df:cf:21:a9:4f:c3:98:8e:d3:9a:1c:32:53: 83:b9:c8:63:1b:59:25:6d:36:9c:80:6b:4e:e9:9f: e0:1e:0e:ba:f1:41:ef:f8:e6:3c:5c:a9:d4:08:8c: a1:34:78:21:1a:2e:d9:b2:4e:47:e2:20:df:54:0f: e2:92:40:2a:15:d7:5a:c1:1c:96:07:19:1e:49:82: bd:e9:43:e5:2e:d6:53:87:b4:64:17:96:71:f9:2e: bf:80:85:f7:e1:41:1d:65:f5:23:a1:37:da:e3:67: cf:bd:51:77:20:7e:c5:52:60:79:e1:f0:1d:eb:f0: 29:29:a9:d3:33:e8:e3:9d:01:89:c3:3b:9d:ef:c2: 80:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:3F:48:0F:89:EA:98:AB:BE:A9:73:7E:FF:0D:85:24:3F:64:6A:FB X509v3 Authority Key Identifier: keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:71:e6:f8:8c:59:6d:db:86:61:e2:4a:30:30:7b:8b:63:14: fc:25:0e:a1:20:dc:25:10:38:4b:e6:8d:18:e1:ef:f9:20:0e: 4f:f5:09:7f:0f:ed:e1:3b:a3:63:3f:06:69:1e:69:c0:f9:db: 8a:76:41:e2:42:f7:84:65:4b:5a:33:d5:59:23:ad:70:96:8a: d9:a9:7a:ee:2b:94:e0:26:b1:98:a0:07:eb:aa:2e:b5:e4:d6: 60:1f:cd:7c:52:46:6d:bf:5f:90:76:56:f0:9a:26:3f:9a:26: 6f:6b:db:ca:d8:a3:fd:23:55:e3:a3:12:cf:21:ca:ea:e1:4f: e3:2e:35:20:ab:3e:ba:58:9f:91:cc:7b:ce:b1:5c:9e:14:d8: 7e:a1:e1:d8:f7:65:51:19:49:bd:d2:4f:7c:60:19:bf:c2:62: 88:90:c1:8b:9f:5c:78:8d:fe:d3:9b:76:f3:ee:94:c3:5e:c8: 42:79:7e:66:c8:d2:f5:1b:a0:ee:b9:73:cb:fd:c6:c9:1a:ea: 45:29:d1:be:19:99:69:be:66:30:b4:0e:04:18:37:36:85:65: 31:38:df:82:a3:03:90:1d:8e:4f:f1:1c:34:9a:3b:db:44:44: 4d:fa:9e:1f:65:7d:43:fb:f0:4c:e5:5c:f1:c8:34:88:73:f0: 74:eb:50:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxQjgxMTAvBgNVBAUTKDZEN0Q4MDU3NkM0QjNCRTZBRkY0MzFGOEQzMjMzOEY3 MUZERjAxREQwHhcNMjUwNTMwMTc1MjIyWhcNMjUwNjA2MTc1MjIyWjAYMRYwFAYD VQQDEw02ODM5ZjA1Ni01Nzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0ADTH7+QmzkuT7dPD+o6aBlvAz59Bohuwk0aexNhc7GK88ZbKJ3P3T+Mmzb jy0F8YkCVVgkx9L0STqN3vH0qeXPeyj7FBYX049OSLAmvLjSfgwxOdiA3UTYo47g b5ZwHDOJwWph6baP2N1HhokmJTox1ay7t7blxt/PIalPw5iO05ocMlODuchjG1kl bTacgGtO6Z/gHg668UHv+OY8XKnUCIyhNHghGi7Zsk5H4iDfVA/ikkAqFddawRyW BxkeSYK96UPlLtZTh7RkF5Zx+S6/gIX34UEdZfUjoTfa42fPvVF3IH7FUmB54fAd 6/ApKanTM+jjnQGJwzud78KAyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4/SA+J 6pirvqlzfv8NhSQ/ZGr7MB8GA1UdIwQYMBaAFG19gFdsSzvmr/Qx+NMjOPcf3wHd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFCOC9GQkRFOTlGQTkw RkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8tYXY5REg0MHlNNDl4X2ZB ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYMkFWMnhMTy1hdjlESDQweU00OXhfZkFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFCOC9GQkRFOTlGQTkwRkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8t YXY5REg0MHlNNDl4X2ZBZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASceb4jFlt24Zh4kowMHuLYxT8JQ6hINwlEDhL5o0Y4e/5IA5P9Ql/ D+3hO6NjPwZpHmnA+duKdkHiQveEZUtaM9VZI61wlorZqXruK5TgJrGYoAfrqi61 5NZgH818UkZtv1+QdlbwmiY/miZva9vK2KP9I1XjoxLPIcrq4U/jLjUgqz66WJ+R zHvOsVyeFNh+oeHY92VRGUm90k98YBm/wmKIkMGLn1x4jf7Tm3bz7pTDXshCeX5m yNL1G6DuuXPL/cbJGupFKdG+GZlpvmYwtA4EGDc2hWUxON+CowOQHY5P8Rw0mjvb RERN+p4fZX1D+/BM5VzxyDSIc/B061C/ -----END CERTIFICATE-----Generated at Sat May 31 16:32:13 2025 by rpki-client